Engineering Manager, Network Security

Summary

Apple is where individual imaginations gather together, committing to the values that lead to great work. Every new product we build, service we create, or Apple Store experience we deliver is the result of us making each other’s ideas stronger. That happens because each of us believes we can create something wonderful and share it with the world, changing lives for the better. It’s the diversity of our people and their thinking that inspires the innovation that runs through everything we do. When we bring everybody in, we can do the best work of our lives. Here, you’ll do more than join something — you’ll add something.

Infrastructure Services is part of IS&T and the foundation of Apple's global network operations — managing data center equipment and systems to deliver compute, storage, and networking services for teams across Apple, including its internal developer community. From individual facilities to a worldwide network, Infrastructure Services ensures the technology underneath everything works without question

Description

Apple’s Network Infrastructure is a critical foundation for delivering Apple’s services (such as iCloud, iTunes, Siri, Maps, and Private Cloud Compute) to billions of customers and employees. Apple’s Data Center Networking team is responsible for all aspects of the Network Infrastructure, from Operations to Architecture, that is deployed globally across Apple’s Data Centers and Edge locations. We are responsible for delivering a network that can match Apple’s scale, reliability, and security goals.

We work closely with Apple’s other Infrastructure organizations and Hardware and Software Architecture teams to influence, build, and operate Apple’s Infrastructure. Our influences can range anywhere from Data Center Network Fabrics to Hardware System Design. We listen to different perspectives, help surface innovative ideas, and drive decisions that move us forward.

As the leader of Network Security Engineering, you will collaborate closely with the SDI team to influence the design of next-generation security products and features, and to operationalize innovative security solutions that power Apple’s hyperscale network infrastructure. Our environment extends well beyond Apple’s data centers and edge locations, encompassing Apple Cloud platforms as well as third-party cloud environments.

This role spans the full spectrum of network security, from on-premises data centers to hybrid and multi-cloud architectures. We are seeking a highly motivated Manager with a strong passion for designing, implementing, and securing large-scale cloud and data center network infrastructures. You will play a key role in protecting hybrid environments by applying advanced network security controls, automation, and industry best practices across on-prem, cloud, and multi-cloud deployments.

Preferred Qualifications

Experience in OVS, Container & Kube networking
Self-starter, self-motivated, self-directed, and self-sufficient. Drives ideas from inception to implementation
Demonstrates consistent technical, organizational, and industry-level awareness.
Technical presentation and communication skills with the ability to articulate concepts, designs, and decisions to both technical and non-technical audiences.
Proven experience leading and mentoring senior engineers and architects
Ability to partner closely with: AI/ML platform teams, Cloud Platform teams, Infrastructure and data center operations, SRE and DevOps teams
Comfortable influencing architecture decisions to embed security early, not as a blocker.

Minimum Qualifications

10+ years of experience in building, securing, and deploying large-scale data center network & cloud environments
5+ years of security leadership
3+ years in a senior architecture role
Sophisticated knowledge of TCP/IP, routing protocols, security protocols, and large-scale network features.
Deep technical background in network-layer security mechanisms like Routing isolation, routing security, Stateful and stateless firewalls, Network access control, VPN and tunneling technologies, overlay network technologies ( VXLAN, GRE, etc.)
Cloud-scale networking security background in developing, enforcing, and maintaining security frameworks, policies, and best practices.
Extensive understanding of public & private cloud networking security architecture & compute virtualization technologies